Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: wOciiEYRjsDkJ+Rd8d2HGpajWsOGNv0nhLldd6q6f1E=
Subject key identifier: 82:52:D0:D8:FA:43:1A:D0:02:09:7B:01:84:94:AE:79:00:CC:7C:7F
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 01A11974AAA54BB71030129A6D5480B309CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 04B6
Signing time: Thu 08 Oct 2026 03:00:38 +0000
Manifest this update: Thu 08 Oct 2026 03:00:38 +0000
Manifest next update: Fri 09 Oct 2026 03:00:38 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: +NZDRhgQhxAR9Gsowz5Ofzd5cg6VE/xGmkzbAMx8Zns=)
2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:74:aa:a5:4b:b7:10:30:12:9a:6d:54:80:b3:09:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Oct 8 03:00:38 2026 GMT
Not After : Oct 9 03:00:38 2026 GMT
Subject: CN=8252d0d8fa431ad002097b018494ae7900cc7c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:a7:f6:bb:2e:9e:11:2a:04:1e:11:ea:f2:
14:c5:49:70:b2:e1:84:07:07:ea:6c:83:9d:18:62:
d6:f2:20:9e:e9:38:ad:db:77:f3:2f:51:2e:d6:51:
ee:87:df:11:9b:f0:ef:e4:c6:47:3c:f5:e7:9e:33:
a1:f6:53:86:33:0f:4c:3c:0f:07:dd:b6:02:c3:4b:
2b:06:20:a3:05:a0:b9:6a:1d:9d:da:a5:93:d4:55:
76:15:a2:f0:e0:1e:cb:e3:68:28:06:c3:86:c7:eb:
b1:bb:17:90:51:97:22:83:37:ee:f4:6c:7f:fa:22:
3c:6f:2f:8c:c0:89:d7:4c:18:a0:7c:8d:0d:89:12:
e0:c2:68:26:91:53:7c:77:e2:71:b9:08:7c:dd:81:
e4:0a:59:18:99:00:8a:70:40:75:26:d9:2e:58:91:
2f:b1:ad:aa:57:12:c6:bb:e7:f2:b2:07:f9:c7:7e:
4f:1b:2c:79:ea:f8:87:5e:b2:e8:54:70:4b:6f:d5:
c3:64:eb:8d:65:51:ea:57:95:28:a5:cb:b7:3b:b9:
8a:f0:c8:d9:93:56:2e:00:36:6e:e0:ea:c3:0b:bd:
99:31:b7:ed:30:57:97:46:77:82:14:6d:b8:0b:e4:
65:96:f2:43:79:1f:63:5e:f1:b1:da:34:62:35:fd:
41:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:52:D0:D8:FA:43:1A:D0:02:09:7B:01:84:94:AE:79:00:CC:7C:7F
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:79:e2:15:b9:75:d6:73:40:2b:b9:16:ca:97:d8:cd:62:4e:
fb:81:e7:dc:5d:01:b3:99:be:ee:5b:2b:e0:db:84:5a:f2:2e:
37:c4:d4:5b:64:0b:cf:b5:46:85:60:63:c2:c3:9c:3c:86:bd:
b2:d7:ef:01:61:c8:93:0c:b3:0d:14:63:c5:ad:62:0f:f2:f6:
12:a6:4b:f9:3c:f8:8a:13:b1:9a:5e:b9:3b:cb:83:bd:b2:51:
a6:af:df:ec:47:dc:9f:cc:b7:d6:06:fe:76:8f:35:48:a5:b4:
02:94:67:ec:aa:1b:1b:e8:92:4b:61:b4:86:c1:71:a8:2d:e8:
3a:7b:d8:06:ff:db:ca:34:32:15:2e:2c:57:a2:cc:a9:db:c9:
b1:49:59:52:6b:48:e8:2c:3a:98:1f:f6:18:f5:7a:36:dd:4d:
47:9e:63:03:98:f0:13:f0:c2:8f:24:46:72:10:76:2d:1c:d8:
7a:26:85:d8:96:85:ee:12:4d:57:40:f1:e6:54:ab:4a:be:74:
81:ad:25:6d:fa:32:cb:cf:2d:59:6d:ac:2f:ec:6c:cc:fc:84:
75:29:4c:01:cd:b1:c2:9d:eb:0e:f9:fb:ce:62:25:0c:9b:97:
bf:ad:ed:9b:80:b8:ce:26:a6:e8:b3:2b:94:43:b2:0f:1d:52:
d4:67:cc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:35:10 2026 by rpki-client